Information Security Officer

We are in the process of evaluating the role and reporting structure of our information security officer. Does anyone have a job description they would be willing to share? Or information on how your credit union fills this role?  I'm looking for information about what their responsibilities are and where the position falls in the organization. Currently our position is in IT, but we are considering the Compliance Department, and I have also heard of others who report to the COO.  Any information will be appreciated and if you have a job description to share, you can email me at [email protected].